Search results

Unbounded allocation in VecOf decode

Status: Open.

#567 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Gzip decompression bomb in RA-TLS cert extension

Status: Open.

#566 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

get_app_env_encrypt_pub_key unauthenticated — app_id enumeration

Status: Open.

#564 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

simulate_quote patches report_data at hardcoded offset with no build-time guard

Status: Open.

#563 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Configfs path overridable via environment variable enables fake quotes

Status: Open.

#562 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

mTLS client certificates non-mandatory in default KMS config

Status: Open.

#561 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Admin token comparison not constant-time

Status: Open.

#560 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Zero mr_config_id bypasses verification + weakens mr_aggregated identity

Status: Open.

#559 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Path traversal in KMS remove_cache

Status: Open.

#558 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Runtime event log writable by any VM process

Status: Open.

#557 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

Disk encryption key and WireGuard key visible in /proc/PID/cmdline

Status: Open.

#556 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026

LUKS header TOCTOU between validation and luksOpen

Status: Open.

#555 In Dstack-TEE/dstack;

· pbeza opened on Mar 17, 2026